The Information defense regulation establishes that you have the appropriate never to be subject to a choice dependent only on automatic indicates, if the decision generates authorized consequences about you or drastically has an effect on you in an identical way. The EU has set up Intercontinental information security agreements https://nathanlabsadvisory.com/testing-for-compliance/